Privacy
Summary, last updated 13 July 2026.
What we store. Your account (name, email), your workspaces, and the advertising data you connect: campaign structure, ads and performance metrics synced read-only from Meta, Google and LinkedIn.
How tokens are handled. Platform access tokens are encrypted (AES-256-GCM) before they are stored and are only decrypted by our isolated sync worker. They are never exposed to the browser or to the AI agent.
What the AI sees. The agent reads your workspace's advertising data to analyze and draft. It cannot publish or change anything; every proposed change requires your explicit approval, and every decision is written to an append-only audit log.
Deletion. Disconnecting a platform deletes the stored token. Revoking access from the platform's side (e.g. Meta data-deletion callback) does the same automatically. Email us to delete your account and all workspace data.
No resale. We do not sell your data or use one customer's data to serve another.
Cookies
Necessary cookies keep you signed in and remember your workspace. On our public marketing pages we also use optional analytics and marketing cookies, but only with your consent where the law requires it (EU/EEA, UK, Switzerland). You choose in the cookie banner and can change your mind by clearing this site's cookies. We never store your IP address in our own database.
| Cookie | Category | Purpose | Lifetime |
|---|---|---|---|
| sb-* | Necessary | Your sign-in session (Supabase Auth). | Session / rotating |
| gos-ws | Necessary | Remembers which workspace you last used. | 1 year |
| gos_oauth_* | Necessary | Protects ad-platform connect flows against forgery. | 10 minutes |
| gos-consent | Necessary | Stores your cookie choices. | 12 months |
| gos-attr | Analytics | Where your visit came from (campaign, referrer) so we know which channels work. | 90 days |
| Google Tag Manager / GA4 | Analytics | Anonymous usage measurement of the marketing site. Loads only per your consent. | Up to 24 months |
| Meta Pixel | Marketing | Measures our own ads and enables retargeting. Loads only per your consent. | Up to 90 days |